ebayg[.]cc

Analysis of the domain ebayg.cc confirms it is a high-risk phishing site, specifically targeting ecommerce users. The domain was created on September 23, 2025, and has been active since then, consistently resolving to the IP address 172.67.209.105, which is associated with Cloudflare, Inc. in California. The page title 'Skinport' suggests that the site may be masquerading as a legitimate ecommerce platform, likely to deceive users into providing sensitive information such as login credentials or financial details. The domain is flagged by 13 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among the cybersecurity community. Furthermore, the domain appears on three security blocklists, including PhishDestroy and SEAL, which are known for identifying and mitigating phishing threats. The use of Cloudflare technologies, such as Browser Insights and HTTP/3, may be an attempt to enhance the site's credibility and performance, making it more convincing to unsuspecting visitors. The SSL certificate issued by Google Trust Services provides an additional layer of apparent legitimacy, which can be leveraged to bypass some security checks. Despite these technical measures, the domain's low Gridinsoft trust score of 0/100 and the presence on multiple blocklists strongly suggest that it is a malicious site. Defenders should block this domain and educate users to avoid clicking on links or entering personal information on any site that appears suspicious or redirects to ebayg.cc. Continuous monitoring and updates to blocklists are recommended to ensure that the domain remains inaccessible to users.